This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: kE9AHuKqix8CynJJSVvmPtNA8uHeCsEhnHTUGPD58nE=
Subject key identifier: 63:AC:D0:9F:01:BD:93:EE:D5:71:7A:7A:82:A8:FB:8B:0C:90:BE:39
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019BF5E2EA3B75D24AE54A77CBED90BE56AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 0FF6
Signing time: Sun 25 Jan 2026 16:00:47 +0000
Manifest this update: Sun 25 Jan 2026 16:00:47 +0000
Manifest next update: Mon 26 Jan 2026 16:00:47 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: XRvmyJAaXyrwf7IlzSevPFpSe87oBFy1GoQavLrz9qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e2:ea:3b:75:d2:4a:e5:4a:77:cb:ed:90:be:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jan 25 16:00:47 2026 GMT
Not After : Jan 26 16:00:47 2026 GMT
Subject: CN=63acd09f01bd93eed5717a7a82a8fb8b0c90be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:68:3e:76:52:09:97:a5:8a:8d:b9:cd:10:
89:a0:d8:63:a6:56:45:8d:e1:82:e8:c9:46:3e:26:
e1:df:eb:89:98:b9:b6:f4:17:e3:85:0b:1d:dc:45:
6e:46:4c:de:45:59:74:70:17:cb:d5:9d:ac:f1:e7:
ca:13:9d:ee:30:64:bf:cd:03:3a:32:e4:5c:64:6d:
aa:22:4f:a7:af:b1:2a:6f:e1:1c:6f:27:2f:96:a8:
ae:fc:55:52:93:6d:30:61:c5:a2:38:89:87:1c:7a:
05:9b:90:2c:9d:26:46:6d:8a:43:53:37:e8:4f:c6:
81:56:65:b1:ba:c9:19:e8:e1:f6:f3:62:e7:81:24:
fd:43:5e:f8:07:50:9b:e0:9d:a2:d0:0c:7f:13:ed:
f9:52:bf:f8:d8:6e:c7:83:4e:9b:80:c4:69:3f:ee:
12:a4:c0:26:0d:36:54:d5:d1:d0:af:11:a9:ce:6b:
20:97:e2:e1:6a:6a:2a:5e:68:89:c0:76:7f:f6:e2:
5b:3e:7a:57:8b:a4:ae:01:ae:b6:be:62:75:81:56:
bc:80:5c:42:70:55:02:ac:e9:8d:f5:33:f9:7e:1b:
2a:14:e5:c7:7e:ec:fa:b3:03:08:e9:e4:4b:b1:4c:
9a:2a:97:22:4a:d5:6d:7e:7a:d4:e8:9d:d7:12:d6:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:D0:9F:01:BD:93:EE:D5:71:7A:7A:82:A8:FB:8B:0C:90:BE:39
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:fe:c1:3e:43:90:d5:4d:43:7a:0a:d2:aa:45:a9:02:cb:
c6:30:24:78:0e:af:79:a3:0d:ce:bb:d6:f1:16:56:b1:f2:91:
13:8e:81:03:a7:9c:6f:3a:09:ad:50:ee:9a:9a:87:07:18:ff:
27:5a:00:42:d5:27:63:b0:ad:48:56:28:e8:c4:f5:d3:94:79:
15:13:82:20:35:04:ef:73:b0:11:71:03:0c:d6:c2:0d:8a:5b:
22:ed:ac:66:44:75:f7:c1:ab:8c:dc:79:48:55:5d:22:7d:c5:
fc:5d:95:3a:d3:a2:83:55:1f:7f:3d:26:9f:68:2d:9c:06:33:
f6:01:2c:7b:d0:9c:9f:7e:e4:84:9a:8d:8d:8b:ce:ac:0d:9c:
1c:15:3d:10:68:d0:5a:c4:8a:29:81:5c:b0:eb:78:e5:fd:f1:
eb:2d:a3:c4:dc:1a:b0:af:7b:2a:74:4e:78:fa:c3:91:60:a7:
fd:22:ee:b8:d7:24:79:da:a3:04:a9:94:db:1e:4f:cc:93:73:
67:9a:8b:87:bb:86:78:23:3c:91:c0:5e:54:ab:6e:64:08:a6:
69:2a:40:e4:fc:e1:c4:b4:6c:45:85:e0:b0:3a:00:d3:12:b8:
03:bc:5c:21:82:96:f6:13:f0:f9:61:e4:76:18:10:aa:76:23:
35:83:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:18 2026 by rpki-client